[krbdev.mit.edu #8764] get_creds can add redundant cache entry for	referral ticket 
    Greg Hudson via RT 
    rt-comment at KRBDEV-PROD-APP-1.mit.edu
       
    Wed May 22 12:42:31 EDT 2019
    
    
  
https://github.com/krb5/krb5/pull/912#issuecomment-494860167 
demonstrates another case where we can see a duplicate: when copying a 
ccache containing a cred with the referral realm in the service 
principal, krb5_cc_store_cred() will store a duplicate.
Since this ticket was filed, we implemented functioning remove_cred for 
all ccache types, although the FILE implementation only hides the cred.  
krb5_cc_store_cred() has a remove_cred call when storing the ticket 
server cred (mistakenly left behind by commit 
7783054742ddd807f7b2f7157d6ed81b7fb614eb) so the visible symptoms of 
this issue are no longer present.
    
    
More information about the krb5-bugs
mailing list